Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215728.roa
File:                     AS215728.roa (raw, json)
Hash identifier:          fC0YZtH25WQLWvjWPPg3cAWeq5EhlAnbwGrJRjWqEms=
Subject key identifier:   64:FE:F0:B0:AE:8A:A8:CC:6A:53:14:1B:9B:22:DA:DA:66:64:17:78
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6117EA61BB8F3E9F24D51B7CB786B2AF5EA2E068
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215728.roa
Signing time:             Wed 02 Sep 2026 14:55:41 +0000
ROA not before:           Wed 02 Sep 2026 14:50:41 +0000
ROA not after:            Wed 01 Sep 2027 14:55:41 +0000
asID:                     215728
IP address blocks:        169.40.119.0/24 maxlen: 24
                          169.40.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:17:ea:61:bb:8f:3e:9f:24:d5:1b:7c:b7:86:b2:af:5e:a2:e0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep  2 14:50:41 2026 GMT
            Not After : Sep  1 14:55:41 2027 GMT
        Subject: CN=64FEF0B0AE8AA8CC6A53141B9B22DADA66641778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:c2:27:2c:fa:af:7a:75:23:9e:21:87:d0:
                    37:28:ac:a9:f0:da:ad:16:f4:9a:28:eb:bb:0d:a9:
                    ae:0b:21:a4:66:f3:5e:31:84:b8:1b:54:65:5e:6a:
                    a5:e5:fc:d8:52:d3:e0:62:f0:6e:83:22:02:c2:4a:
                    66:30:f9:e2:c1:d8:37:0d:cf:70:8b:e7:4a:43:41:
                    55:26:d9:fe:b5:a1:f4:df:30:db:08:25:8d:e1:ab:
                    f5:fc:6a:10:ee:1b:79:be:9e:27:c9:10:dc:95:b7:
                    c4:de:6c:14:71:4c:77:5c:d3:34:b8:19:7b:f1:6a:
                    5a:b4:91:86:6c:de:fb:18:ba:f8:ee:fa:bd:6a:cc:
                    43:ef:67:84:40:ec:14:ee:9d:3c:34:40:30:82:fd:
                    82:68:1e:8e:2c:e7:4e:13:4f:21:a4:8b:78:54:60:
                    7d:9d:96:d4:bc:5a:5a:89:78:52:f2:6b:ed:9c:5b:
                    d6:58:ce:f0:03:3a:84:9b:3c:7f:95:c9:37:7d:ef:
                    63:40:b0:b7:26:30:6f:b6:47:75:63:5d:99:30:a4:
                    76:43:cf:11:67:60:c4:1b:11:fb:12:6b:52:79:42:
                    47:08:32:b8:ea:5a:fc:22:2a:dd:c8:6a:f4:f3:8f:
                    2d:6c:e1:3f:aa:25:0f:ee:af:56:1a:e7:67:b1:91:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:F0:B0:AE:8A:A8:CC:6A:53:14:1B:9B:22:DA:DA:66:64:17:78
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.119.0/24
                  169.40.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:ca:de:c1:17:6f:6d:93:04:c9:ae:c6:26:1d:81:99:fe:
         12:79:a8:b9:c9:04:22:25:47:05:1a:30:ca:81:2a:ce:24:87:
         f9:37:ae:9e:ac:1d:b4:7d:47:dd:03:8f:ac:c5:84:9a:d2:be:
         57:07:13:5d:de:9d:22:82:00:49:a3:31:92:6c:3a:83:d3:18:
         57:da:04:01:c6:10:e5:79:96:6b:66:15:58:ec:77:4b:94:73:
         5b:c6:50:6e:c9:c8:bf:8f:fc:87:7e:ef:d7:eb:ca:df:0e:55:
         b5:ed:ba:de:ff:36:b9:56:39:16:e2:a1:f7:e1:04:1e:0a:78:
         2b:d6:c1:8e:3b:88:14:c2:63:e3:d4:23:73:23:76:ed:83:9f:
         c1:06:48:35:6d:75:36:91:2b:23:54:09:c2:c4:92:9b:aa:1a:
         13:69:31:ba:76:8b:7d:71:06:96:81:f0:f3:af:a4:bc:07:14:
         b1:bd:5a:13:c2:09:90:14:0b:77:52:3b:4d:4b:00:69:e1:5a:
         61:4d:a7:e7:8a:a4:74:e6:28:52:76:64:27:92:40:b3:6d:eb:
         60:7e:84:a0:09:d4:74:91:1a:98:b5:6f:58:2d:85:dd:6e:0f:
         76:5f:97:f7:07:47:6d:0a:e2:eb:92:08:cf:00:5b:2f:6d:35:
         88:c1:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:14 2026 by rpki-client